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Top Stories 

• Authorities reported that a July 14 explosion at the Zodiac Aerospace plant in Newport, 
Washington was a result of chemical vapor build-up, after the explosion hospitalized seven 
workers and severely damaged the plant’s structural integrity. - Reuters (See item 4 ) 

• Tracks in Pulaski County, Virginia reopened after a 31-hour closure while crews cleared 
the scene of a train crash that caused 18 cars to derail, spilled 20,000 gallons of lube oil, 
and prompted an evacuation of nearby homes July 15. - WDBJ 7 Roanoke (See item 10 ) 

• U.S. Highway 287 in Montana was shut down for about 7 hours July 15 after a head-on 
collision killed 3 people and injured 5 others. - The Missoulian (See item 11 ) 

• Chattanooga State Community College and the Bradley Square Mall in Chattanooga, 
Tennessee were on lockdown July 16 after an active shooter situation at 2 U.S. Navy 
Reserve recruiting centers led to the deaths of 4 military personnel and the shooter. - 
Newsweek (See item 20 ) 
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Energy Sector 

1. July 15, Milwaukee Journal Sentinel - (Wisconsin; Iowa) Alliant to spend $620 
million to close, clean up coal fired plants. Madison, Wisconsin-based Alliant Energy 
Corporation announced a settlement between its subsidiary, Interstate Power and Light 
Company of Iowa, and the U.S. Environmental Protection Agency July 15 to either 
close or install pollution controls in its coal-fired power plants in Iowa at a cost of over 
$620 million, in addition to a $1.1 million fine. 

Source: http://www.isonline.com/business/alliant-to-spend-620-million-to-close-clean- 
up-coal-fired-plants-b99538906zl-315566291.html 

For another story, see item 23 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

2. July 15, U.S. Consumer Product Safety Commission - (International) Cooper Lighting 
recalls fluorescent lighting fixtures due to fire hazard. Cooper Lighting issued a 
recall July 15 for about 1.62 million indoor 2-light fluorescent light fixtures due to an 
issue with the socket that can cause the unit to overheat, arc, and melt, posing a fire 
hazard. The product was sold at Ace Hardware, Lowe’s, Menards, Mills Fleet Farm, 
True Value, and other retail stores nationwide from 2011 -2015. 

Source: http ://w w w .cpsc . gov/en/Recalls/20 1 5/Cooper-Li ghting-Recalls-Fluorescent- 
Lighting- 

Fixtures/?utm source=feedly&utm medium=rss&utm campai gn=Rccal 1 s+RSS 

3. July 15, Associated Press - (National) Nissan recalls 270K vehicles worldwide to fix 
start buttons. Nissan issued a recall July 14 for about 14,600 model year 2013 - 2014 
Versa, Cube, and Juke vehicles due to an issue with ignition start switches in which 
they could stick in their housings in hot weather, potentially switching vehicles off 
while in operation. 

Source: http://abcnews.go.com/Business/wireStory/nissan-recalls-270k-vehicles- 
worldwide-fix-start-buttons-32473762 

4. July 15, Reuters - (Washington) Blast closes U.S. Zodiac Aero plant; Boeing, Airbus 
assess impact. Authorities reported that a July 14 explosion at the Zodiac Aerospace 
plant in Newport, Washington was a result of flammable chemical vapor build-up in a 
resin “treater” machine. The explosion hospitalized seven workers and severely 
damaged the plant’s structural integrity, prompting Boeing and Airbus to assess the 
incident’s impact on company operations. 
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Source: http://www.reuters.com/article/2015/07/15/us-zodiac-aero-blast- 
idUSKCN0PP20D20150715 



5. July 15, Car and Driver - (National) Subaru recalls 32,000 Imprezas for airbag 
sensors. Subaru issued a recall for 32,400 model year 2012 Impreza vehicles due to an 
issue with the passenger seat capacitance sensor in which a cellphone, damp clothes, 
another electrical device, or an ungrounded condition could cause the airbag to 
deactivate or activate improperly. 

Source: http://blog.caranddriver.com/subaru-recalls-32000-imprezas-for-airbag- 
sensors/ 

6. July 15, U.S. Department of Labor - (Ohio) Worker endures 3 surgeries after press 
crushes hand at seal manufacturer. The Occupational Safety and Health 
Administration cited Lauren Manufacturing LLC of New Philadelphia, Ohio July 13 
with 6 violations for exposing workers to machinery operating parts, failing to develop 
and train workers on steps for shutting down or isolating energy sources to machinery 
during maintenance and service, and for failing to notify the agency of an injury to a 
worker involving a press machine. Proposed fines total $105,000. 

Source: https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS 
RELEASES&p id=28269 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

7. July 15, KAKE 10 Wichita - (Kansas) ATM skimmer use discovered at 7 th Wichita 
bank. Home Bank & Trust Co., officials reported that an ATM skimming device was 
used at a Wichita location, bringing the total number of skimmers found in Wichita in 
July to seven. 

Source: http://www.kake.com/home/headlines/Another-ATM-Skimmer-Found-At- 
Wichita-Bank— 3 15526371 .html 

8. July 15, Orange County Register - (California) Santa Ana man suspected of being 
“Big A Bandit’ is arrested. FBI officials reported July 15 that authorities had arrested 
a suspect believed to be the “Big A Bandit” responsible for robbing 3 banks in 
Anaheim, Fullerton, and La Habra. 

Source: http://www.ocregister.com/articles/bank-671912-simmons-west.html 

Transportation Systems Sector 

9. July 15, San Francisco Chronicle - (California) Hwy. 84 in Livermore closed until 
about 7 p.m. after deadly crash. Highway 84 was closed in both directions in 
Livermore July 15 while crews cleared the roadway following a fatal crash that 
involved a semi-truck and 3 other vehicles. There were no injuries reported. 

Source: http://www.sfgate.com/bavarea/article/Highwav-84-closed-in-Livermore-after- 
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fatal-crash-6386 199.php 



10. July 15, WDBJ 7 Roanoke - (Virginia) Pulaski County Norfolk Southern tracks 
reopen after train derailment. Tracks in Pulaski County reopened after being closed 
for 31 hours while crews cleared the scene of a 2-train crash that caused 18 cars to 
derail, spilled 20,000 gallons of lube oil, and prompted an evacuation of nearby homes 
July 15. No injuries were reported. 

Source: http://www.wdbi7.com/news/local/pulaski-county-norfolk-southem-tracks- 
reopen-after-train-derailment/34 191694 

11. July 15, The Missoulian - (Montana) Three dead, five injured in morning head-on 
collision on Highway 287. U.S. Highway 287 was shut down for approximately 7 
hours July 15 due to a head-on collision that killed 3 people and injured 5 others. The 
cause of the accident remains unknown and officials are investigating the incident. 
Source: http://missoulian.com/news/state-and-regional/update-three-dead-five-iniured- 
in-morning-head-on-collision/article 8aa7dcdl-624e-5ef0-95e4-004ec702054a.html 

12. July 15, Lower Hudson Valley Journal News - (Ohio) 6-vehicle crash clogs NB 1-75 
in Monroe. All lanes along northbound Interstate 75 in Monroe are back open after 
being closed for more than 6 hours July 15 due to a 6-vehicle accident that injured 1. 
Source : http://www.iournal-news.com/news/news/i-75-shut-down-following-multi- 
vehicle-accident/nmzW 5/ 



For another story, see item 23 

Food and Agriculture Sector 

13. July 15, Food Safety News - (National) Chicken nuggets recalled for Staphylococcal 
Enterotoxin risk. The Food Safety and Inspection Service reported July 15 that 
Murry’s Inc., a Lebanon, Pennsylvania establishment is recalling approximately 20,232 
pounds of gluten-free breaded chicken nugget products after samples showed positive 
traces of Staphylococcal enterotoxin. The product was shipped to an establishment for 
distribution nationwide. 

Source: http://www.foodsafetvnews.com/2015/Q7/chicken-nuggets-recalled-for- 
staphylococcal-enterotixin-risk/#.VaeclvlVhBc 

Water and Wastewater Systems Sector 

14. July 16, KMOV 4 St. Louis - (Illinois) Boil order issued for Roxana. Roxana Water 
Department issued a boil order July 16 for the residents of Roxana, Illinois after a water 
man break occurred July 15. The order is in effect until further notice. 

Source: http://www.kmov.com/storv/29561167/boil-order-issued-for-roxana 

15. July 15, KVLY 11 Fargo - (North Dakota) Boil order in Fairmount, ND after Water 
Tower is damaged by storm. A boil order was issued July 14 to the residents of 
Fairmount after a storm damaged the top of the town’s water tower. The Red Cross 
with Richland County Emergency Management are working to determine the needs for 
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the community and have delivered 200 cases of water. 

Source: http://www.vallevnewslive.com/home/headlines/Restrictions-for-ND-town- 
after-water-tower-damaged-by-storm-3 1 5253 1 21 .html 

Healthcare and Public Health Sector 

16. July 15, Tampa Bay Business Journal - (Florida) Pasco doctor, office manager 
arrested for alleged Medicaid fraud. A Pasco County physician and office manager 
were arrested July 15 on charges of allegedly stealing more than $100,000 from the 
Florida Medicaid program by billing for services never provided. 

Source: http://www.biziournals.com/tampabav/news/2015/07/15/pasco-doctor-office- 
manager- arrested- for- alle ged . html 

17. July 14, Centers for Medicare and Medicaid Services - (National) CMS cutting-edge 
technology identifies and prevents $820 million in improper Medicare payments in 
first three years. The U.S. Centers for Medicare and Medicaid Services announced 
July 14 its Fraud Prevention System had identified or blocked $820 million in 
inappropriate payments during its first 3 years by using predictive analytics to identify 
irregular billing patterns. 

Source: http://www.cms.gov/Newsroom/MediaReleaseDatabase/Press-releases/2015- 
Press-releases-items/20 15-07 - 1 4.html 

18. July 14, WBBJ 7 Jackson - (Tennessee) Regional Hospital agrees to $500k 
settlement for alleged Medicare, Medicaid fraud. The U.S. Department of Justice 
announced July 14 a $510,000 settlement with Regional Hospital in Jackson, Tennessee 
in response to allegations that the hospital defrauded Medicare and Medicaid by 
allegedly performing unnecessary cardiac procedures over an 8-year period. 

Source: http://www.wbbitv.com/news/local/Regional-Hospital-agrees-to-500K- 
settlement-for-alleged-Medicare-Medicaid-fraud-3 15036891 .html 

19. July 15, Pittsburgh Post-Gazette - (National) Blue Cross Blue Shield rolls out new 
identity protections. Blue Cross and Blue Shield health insurers announced July 14 
that they would offer free credit monitoring and fraud detection to millions of 
unaffected customers nationwide by January 1, in addition to those provided to victims 
of recent data breaches which affected the company early 2015. 

Source: http://www.post-gazette.com/business/healthcare-business/2015/Q7/15/Blue- 
Cross-Blue-Shield-rolls-out-new-identity-protections/stories/20 1507 150098 

Government Facilities Sector 

20. July 16, Newsweek - (Tennessee) Report: at least five dead, including suspect, after 
shooting in Tennessee. Chattanooga State Community College and the Bradley Square 
Mall in Chattanooga, Tennessee were on lockdown July 16 after an active shooter 
situation was confirmed by the U.S. Navy at 2 recruiting centers on Amnicola Highway 
and Old Lee Highway. At least four military personnel and the suspect were killed. 
Source: http://www.newsweek.com/reports-active-shooter-situation-naval-reserve- 
center-tennessee-354359 
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Emergency Services Sector 

21. July 15, WSFA 12 Montgomery - (Alabama) Fmr Dothan police officer faces 
additional identity theft charges. A former Dothan, Alabama police officer faces 
identify theft charges after he allegedly used his former military colleagues’ 
information to open credit card accounts, spending approximately $30,000 for personal 
use. 

Source: http://www.mvfoxal.com/storv/29559626/frnr-dothan-police-officer-faces- 
additional-identity-theft-charges 

For additional stories, see items 20 and 27 

Information Technology Sector 

22. July 16, Threatpost - (International) Security support ends for remaining Windows 
XP machines. Microsoft ended security support for Microsoft Security Essentials 
customers running Windows XP as part of its July Patch Tuesday roll-out, and released 
security advisories for a patched race condition flaw in the Malicious Software 
Removal Tool (MSRT) allowing for privilege escalation, as well as an update 
enhancing use of Data Encryption Standard (DES) encryption keys. 

Source: https://thrcatpost.com/security-support-ends-for-rcmaining-windows-xp- 
machines/1 13796 

23. July 16, Securityweek - (International) Siemens patches authentication bypass bug in 
telecontrol product. Siemens released a firmware update for its SICAM MIC modular 
telecontrol devices addressing an authentication bypass vulnerability in which an 
attacker with network access to the device’s web interface could bypass authentication 
and perform administrative operations. 

Source: http://www.securitvweek.com/siemens-patches-authentication-bvpass-bug- 
telecontrol-product 

24. July 16, The Register - (International) Thunder-faced Mozilla lifts Flash Firefox 
block after O-days plugged. Mozilla lifted a block on all versions of Adobe Flash in its 
Firefox Web browser after Adobe released cross-platform updates addressing two zero- 
day vulnerabilities that were revealed in a recent breach of the Italian surveillance 
company, Hacking Team. 

Source: http://www.theregister.co.uk/2015/07/16/mozilla unblocks flash firefox/ 

25. July 16, Securityweek - (International) Vulnerability exposes Cisco Videoscape 
devices to DoS attacks. Cisco released an advisory warning of a security bug in its 
Videoscape Distribution Suite for Internet Streaming (VDS-IS) and VDS Service 
Broker products in which an unauthenticated remote attacker could cause a denial-of- 
service (DoS) condition by sending specially crafted Hypertext Transfer Protocol 
(HTTP) packets to trigger device instability. 

Source: http://www.securitvweek.com/vulnerabilitv-exposes-cisco-videoscape-devices- 
dos-attacks 
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26. July 15, Threatpost - (International) New RC4 attack dramatically reduces cookie 
decryption time. Belgian security researchers discovered biases in the Rivest Cipher 4 
(RC4) encryption algorithm that could lead to attacks breaking encryption on websites 
running transport layer security (TLS) with RC4 and Wi-Fi Protected Access (WPA) 
Temporal Key Integrity Protocol (TRIP) to perform actions under a victim’s name or 
gain access to personal information. 

Source: https://threatpost.com/new-rc4-attack-dramatically-reduces-plaintext-recovery- 
time/113808 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert. gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

27. July 15, Turlock City News - (California) Damaged fiber optic cable causing cell 
phone 911 outages, TID phone issues, AT&T and Verizon service issues. A fiber 
cable cut in San Joaquin County caused technical issues for some AT&T and Verizon 
cell phone users in Stanislaus County, including 9-1-1 service July 15. 

Source: http://www.turlockcitynews.com/news/item/5231-damaged-fiber-optic-cable- 
causing-cell-phone-9 1 1 -outages-tid-phone-issues-at-t-and- verizon-service-issues 

Commercial Facilities Sector 

28. July 16, KNBC 4 Los Angeles - (California) 2 critically injured in Long Beach 
Apartment fire. A Long Beach apartment complex sustained extensive damage after a 
July 16 fire displaced 30 residents and critically injured 2 people. The cause of the fire 
is under investigation. 

Source: http://www.nbclosangeles.com/news/local/Firefighers-Put-Qut-Apartment- 
Fire-Long-Beach-31577091 l.html 

Dams Sector 

Nothing to report 
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NTAS 
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NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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